NLnest


Your privacy is important to us. This Privacy Policy explains what personal data NLnest collects, how we use it, and what rights you have regarding your data.

NLnest is operated by BRANDNEST S.R.L.. By using our platform, you agree to the collection and use of information as described in this policy.

1 Data we collect

Candidate data

  • Personal identification: full name, email address, phone number
  • Professional information: CV/resume, work experience, education, skills, languages
  • Profile information: profile photo, biography, social links (LinkedIn, etc.)
  • Application data: job applications, cover letters, answers to screening questions
  • Communication: messages exchanged with employers or our support team

Company/employer data

  • Company identification: company name, registration number, VAT number
  • Contact details: address, phone, email, website
  • Job postings and application management data

Technical data (all users)

  • Log data: IP address, browser type, pages visited, access times
  • Device information: device type, operating system, screen resolution
  • Cookies: session identifiers, preferences, analytics data

2 How we use your data

We use your personal data for the following purposes:

  • To provide and improve the NLnest platform and services
  • To match candidates with relevant job opportunities in the Netherlands
  • To facilitate communication between candidates and employers
  • To send job alerts, platform notifications and service updates
  • To comply with legal obligations (tax, accounting, GDPR)
  • To prevent fraud and ensure platform security
Legal basis: we process your data based on (a) contract performance when you use our services, (b) your consent for optional features and marketing, and (c) legitimate interests for security and platform improvement.

3 Data sharing and transfers

We do not sell your personal data. We share it only in the following circumstances:

  • Employers / companies: When you submit a job application, your CV, name and cover letter are shared with the employer who posted that job.
  • Service providers: We use trusted third-party providers for email delivery, analytics and hosting. These providers act as data processors and are bound by data processing agreements.
  • Legal requirements: We may disclose your data if required by law, court order or government authority.
We never sell, rent or trade your personal data to third parties for marketing purposes.

4 Cookies

We use cookies and similar tracking technologies to enhance your experience on our platform.

Cookie type Purpose Duration
Session cookies Keep you logged in during your visit Session
Remember me Keep you logged in across browser sessions 30 days
Analytics Understand how visitors use our platform (anonymised) 12 months
Cookie consent Remember your cookie preferences 12 months

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

5 Your GDPR rights

As a data subject under EU GDPR (Regulation 2016/679), you have the following rights:

Right of access
Request a copy of all personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data ("right to be forgotten").
Right to portability
Receive your data in a machine-readable format.
Right to object
Object to processing of your data for certain purposes.
Right to restriction
Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at info@nlnest.com. We will respond within 30 days.

6 Data retention

  • Active candidate accounts: data retained for as long as the account is active.
  • Inactive accounts: data anonymised or deleted after 24 months of inactivity.
  • Job applications: retained for 12 months after the position is closed.
  • Financial records: retained for 7 years as required by Romanian accounting law.

You may request early deletion of your account and data at any time by contacting us.

7 Data security

We take the security of your personal data seriously and implement appropriate technical and organisational measures:

  • All data transmission is encrypted using TLS/SSL (HTTPS)
  • Passwords are stored using bcrypt hashing — never in plain text
  • Access to personal data is restricted to authorised personnel only
  • Regular security reviews and vulnerability assessments

8 Contact & data controller

The data controller responsible for your personal data is:

Legal name
BRANDNEST S.R.L.
VAT number
RO50780530
Address
Str. Corvinilor, Nr. 5, Bl. CORP D, Et. III, Ap. 8, Mun. Satu Mare, Jud. Satu Mare, 440080, Romania
Email
info@nlnest.com

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at https://www.dataprotection.ro.